in a minute I’m going to restart the backend to apply a fix for a very severe account migration vulnerability that can be exploited to cripple a larger instance

outline of the bug and how it was discovered: https://gitlab.com/soapbox-pub/rebased/-/issues/107

for instance admins, comment out post("/move_account", UtilController, :move_account) in lib/pleroma/web/router.ex and recompile pleroma to avoid this vulnerability until a patch is in place

what does this mean for you?

account move activities will be disabled on poast until there is a patch in place to prevent this from happening in future. thank you for your patience over the last 24 hours and see you on the other side friend

since there’s so many of you now i’d like to take the time to remind you that while it’s good you’re here with us, the strength of the fediverse and its resiliency lasts in spreading out. having everyone on one specific server (such as poast in this case) makes it easier for someone to target us to take down individuals they dont like (see the keffals drama if you need an example of this)

to make sure the fediverse is healthy it’s wise for you to make your own servers for your own communities. some of you will say “i dont have any administration experience,” or “i don’t know linux” or something similar – we have a website that can help you set up your own instance for the low cost of free (providing you give oracle your CC#) or for a very low cost for single user or small groups. using the fediverse.express tool to install everything for you is also no cost. this puts you in control of your own data and destiny. be your own janny and clean up your own mess (or your friends)

you can self host at home if thats your kind of thing, I believe fediverse.express will also work with setting it up for you if you dont want to, but there are guides on how to set up your own like poast. ours is built off a much better fork of pleroma called ReBased which can be installed quickly and easily manually by following the guide at https://soapbox.pub/install/

if you need recommendations for a host, I’d suggest BuyVM/Frantech as they offer cheap, reliable and free speech respecting hosting for something like this.

there are lots of guides available and i and many other owners and/or admins can help you if you run into questions. most of us are approachable and will help when we can

the guy who develops our stuff? thats @alex with the help of @mkljczk and others. ways to support Alex are available in his bio

that being said, a lot of you dont care or just want to be here or whatever in which case we welcome you. if you like what we do here consider a crypto or fiat donation to keep poast running.

thanks for being here and we are looking forward to the growth of fediverse as a whole as this takes away the stranglehold on public discourse